At Prime Therapeutics (Prime), we are a different kind of PBM, with a purpose beyond profits and a unique ability to connect care for those we serve. Looking for a purpose-driven career? Come build the future of pharmacy with us.

Job Posting Title

Sr. Business Information Security Officer - Remote

Job Description

The Senior Business Information Security Consultant serves as a direct security contact for our clients. This position provides reporting, metrics and regular status updates to clients. The Senior Business Information Security Consultant works collaboratively with key stakeholders to ensure client security requirements are being met and adhered to.

Responsibilities

• Serves as primary security point of contact for Commercial and State Government Solutions clients and manages intake and coordination of business requests

• Collate monthly reporting (metrics, POAMs, vulnerability, etc.) and provide clients and stakeholders with technical overview on security trends and service issues

• Understand Prime Information Security's policies, processes, and technologies to provide meaningful guidance, advice and understanding to client information security leadership

• Assist in the documentation, management, tracking and reporting of Plan of Action and Milestones to client accounts

• Participate in client RFP and contract reviews and advise Information Security Leadership to ensure consistent security approaches across business accounts

• Assist in the creation and management of System Security Plans (SSPs), work with content owners to ensure SSPs are updated as required and respond as the primary contact for the plans

• Assist with client security assessments and requests by providing the system, services, and requirement scope

• Review vulnerability and patching reports to assess risk level and prioritize remediation actions required by the IT & App teams; champion SLA adherence across IT organizations

• Other duties as assigned

Minimum Qualifications

• Bachelor’s degree in information security, computer science or related area of study, or equivalent combination of education and relevant work experience; High School diploma or GED is required
• 5 years’ work experience in cybersecurity and/or information technology including 3 years in an operationally focused security practitioner role
• Working knowledge of HIPAA Security Rule and NIST security standards

Must be eligible to work in the United States without the need for work visa or residency sponsorship

Additional Qualifications

• Experience with federal or state government IT security processes, controls, and frameworks

• Excellent written, technical, and verbal communication skills

• Capable of exceling in a growing, changing, and collaborative environment

• Strong problem-solving and business analysis skills

• Ability to interpret and produce technical documentation such as diagrams, configuration parameters, processes and procedures, etc.

• Ability to manage multiple priorities and expert multi-tasking skills

• Capable of effective meeting facilitation with technical and non-technical team members

• Ability to develop and present security documentation to executive-level stakeholders

Preferred Qualifications

• CISM (Certified Information Security Manager), , CISSP (certified information systems security professional), CRISC (Certified in Risk and Information Systems Control), or CISA (Certified Information Systems Auditor)
• Experience working in environment with regulatory compliance frameworks and their requirements (PCI, HITRUST, SOC 2 audits, MARS-E etc.)
• Experience in PBM / health care industry
• Experience in the infrastructure domain working with IT Architecture
• Experience with security assessments, controls, and internal or external audits

​

Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their job, and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures

Every employee must be able to perform the essential functions of the job and, if requested, reasonable accommodations will be made to enable employees with disabilities to perform the essential functions, absent undue hardship. In addition, Prime retains the right to change or assign other duties to this job.

Potential pay for this position ranges from $94,000.00 - $160,000.00 based on experience and skills.

Prime Therapeutics LLC is proud to be an equal opportunity and affirmative action employer. We encourage diverse candidates to apply, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sex (including pregnancy), national origin, disability, age, veteran status, or any other legally protected class under federal, state, or local law.  

We welcome people of different backgrounds, experiences, abilities, and perspectives including qualified applicants with arrest and conviction records and any qualified applicants requiring reasonable accommodations in accordance with the law.

Prime Therapeutics LLC is a Tobacco-Free Workplace employer.

Positions will be posted for a minimum of five consecutive workdays.